📰 Dev.to · Guatu

Moving beyond cluster-admin for everything. A practical approach to scoping ServiceAccount permissions for production workloads and AI agents.

Moving beyond basic cert-manager setups to handle DNS-01 challenges, Kubernetes ndots resolution issues, and dynamic IP automation with Cloudflare.

Moving beyond basic tool-calling to a composable skill pattern that makes agent capabilities discoverable and reusable across different frameworks.

Stop trusting the Longhorn UI blindly. Learn to monitor replication, fix stale mounts, and manage snapshot bloat in production K8s storage.

Moving beyond the happy path of Kubernetes policy enforcement. Real-world Kyverno pitfalls, mutation loops, and the gap between docs and production.

Fixing the silent failure of sysctl settings when running Docker inside unprivileged Proxmox LXC containers.

Setting up AdGuard Home for network-wide DNS filtering with a robust failover strategy to prevent total internet outages.

Don't let invalid manifests break your GitOps pipeline. Learn how to use kubeconform and Kyverno exclusions to catch errors before they hit production.

Automating TLS with cert-manager and Cloudflare DNS-01 in Kubernetes

How to back up and recover SealedSecrets encryption keys in Kubernetes

Deploying Ollama on Kubernetes can lead to GPU deadlocks. Here's how to avoid them.

Kubernetes default DNS settings can cause TLS certificate mismatches when using wildcard DNS. Here is how to debug and fix it.

Comparing HiveMQ and Mosquitto for industrial IoT: scalability, security, and reliability

Managing agent credentials with two-tier service accounts: a secure approach for AI agent orchestration

Pod Disruption Budgets can block kubectl drain on Longhorn. Here's how to avoid it.

Kimi's Attention Residuals replace fixed residual connections with learned layer aggregation. What it means for LLM depth.

Fixing default runtime misconfigurations in NVIDIA Container Toolkit for GPU workloads

Avoid naming chaos in ArgoCD by using Helm fullnameOverride effectively

FastMCP makes building Model Context Protocol servers feel like FastAPI. Here's how to go from zero to a working MCP server in under an hour.

Managing a homelab Kubernetes cluster by hand eventually breaks you. Not in a dramatic way — in a...

Most homelab content stops at "I installed Proxmox on a NUC." This post goes further — how I built a...